How do I install the Cis Gworkspace 3.1.3.4.3.3 skill?

Run npx skillmds@latest add cyberstrikeus/cis-gworkspace-3-1-3-4-3-3 in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Cis Gworkspace 3.1.3.4.3.3 skill do?

Ensure protection against inbound emails spoofing your domain is enabled It is listed under Coding & Dev Tools on SkillMD.

Is Cis Gworkspace 3.1.3.4.3.3 safe to use?

SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Cis Gworkspace 3.1.3.4.3.3?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Cis Gworkspace 3.1.3.4.3.3 free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Cis Gworkspace 3.1.3.4.3.3?

cyberstrikeus (@cyberstrikeus) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Cis Gworkspace 3.1.3.4.3.3 by cyberstrikeus

Name: Cis Gworkspace 3.1.3.4.3.3
Author: cyberstrikeus

File contents

3.1.3.4.3.3 Ensure protection against inbound emails spoofing your domain is enabled

Overview

Property	Value
CIS ID	3.1.3.4.3.3
Level	L1
Profile Applicability	Enterprise Level 1
Assessment Type	Manual
Section	Gmail > Safety > Spoofing and authentication

Description

Moves inbound emails spoofing your domain to spam folder.

Rationale

You should protect your users from inbound company domain spoofing emails.

Impact

Inbound company domain spoofed emails will be moved to a user's spam folder.

Default Value

Protect against inbound emails spoofing your domain = checked
Action = Keep email in inbox and show warning (default)

Audit

To verify this setting via the Google Workspace Admin Console:

Log in to https://admin.google.com as an administrator
Select Apps
Select Google Workspace
Select Gmail
Under Safety - Spoofing and authentication, ensure Protect against inbound emails spoofing your domain is checked
Ensure Action is Move email to spam

Remediation

To configure this setting via the Google Workspace Admin Console:

Log in to https://admin.google.com as an administrator
Select Apps
Select Google Workspace
Select Gmail
Under Safety - Spoofing and authentication, set Protect against inbound emails spoofing your domain to checked
Set Action to Move email to spam
Select Save

CIS Controls

Controls Version	Control	IG 1	IG 2	IG 3
v8	9.3 Maintain and Enforce Network-Based URL Filters		x	x
v7	7.4 Maintain and Enforce Network-Based URL Filters		x	x

---name: cis-gworkspace-3-1-3-4-3-3description: Ensure protection against inbound emails spoofing your domain is enabled---# 3.1.3.4.3.3 Ensure protection against inbound emails spoofing your domain is enabled## Overview| Property | Value || ------------------------- | -------------------------------------------- || **CIS ID** | 3.1.3.4.3.3 || **Level** | L1 || **Profile Applicability** | Enterprise Level 1 || **Assessment Type** | Manual || **Section** | Gmail > Safety > Spoofing and authentication |## DescriptionMoves inbound emails spoofing your domain to spam folder.## RationaleYou should protect your users from inbound company domain spoofing emails.## ImpactInbound company domain spoofed emails will be moved to a user's spam folder.## Default Value- `Protect against inbound emails spoofing your domain` = **checked**- `Action` = `Keep email in inbox and show warning (default)`## AuditTo verify this setting via the Google Workspace Admin Console:1. Log in to [https://admin.google.com](https://admin.google.com) as an administrator2. Select **Apps**3. Select **Google Workspace**4. Select **Gmail**5. Under `Safety` - `Spoofing and authentication`, ensure `Protect against inbound emails spoofing your domain` is **checked**6. Ensure `Action` is `Move email to spam`## RemediationTo configure this setting via the Google Workspace Admin Console:1. Log in to [https://admin.google.com](https://admin.google.com) as an administrator2. Select **Apps**3. Select **Google Workspace**4. Select **Gmail**5. Under `Safety` - `Spoofing and authentication`, set `Protect against inbound emails spoofing your domain` to **checked**6. Set `Action` to `Move email to spam`7. Select **Save**## CIS Controls| Controls Version | Control | IG 1 | IG 2 | IG 3 || ---------------- | -------------------------------------------------- | ---- | ---- | ---- || v8 | 9.3 Maintain and Enforce Network-Based URL Filters | | x | x || v7 | 7.4 Maintain and Enforce Network-Based URL Filters | | x | x |

Frequently asked questions

Cis Gworkspace 3.1.3.4.3.3